download-is.chip.eu
NOT DISCLOSED! (Proxy Registrant)
Domain Information
The domain download-is.chip.eu is registered by proxy through Key-Systems GmbH. The domain hosts various software downloads. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon.com, Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrant:
NOT DISCLOSED!
Registrar:
Key-Systems GmbH
Server location:
Oregon, United States (US)
ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.
Scanner detections:
Detections (98% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.installCore.WorldSet (M), PUP.installCore.ISfreemi (M), PUP.installCore.Extended (M), PUP.installCore.WorldSet.Installer (M), PUP.installCore.Extended.Installer (M), PUP.installCore (M), PUP.installCore.ISfreemi.Installer (M)
97.96%
Dr.Web
Trojan.Packed.24524, Trojan.Packed2.37723
16.33%
ESET NOD32
Win32/Parite.B virus, Win32/InstallCore.FH potentially unwanted application, Win32/Kryptik.BWJC trojan, Win32/InstallCore.CH potentially unwanted application
16.33%
avast!
Win32:Parite, Win32:Adware-gen [Adw]
10.20%
Microsoft Security Essentials
Threat.Undefined
10.20%
VIPRE Antivirus
Threat.46249, Threat.4786018
8.16%
Emsisoft Anti-Malware
Win32.Parite, Gen:Variant.Strictor.103245
8.16%
AVG
Win32/Parite, Adware Generic6.CNIV
8.16%
Norman
Win32.Parite.B, Gen:Variant.Strictor.103245
8.16%
McAfee
Virus.W32/Pate.b
2.04%
Kaspersky
Virus.Win32.Parite
2.04%
Sophos
PUA 'Install Core Click run software'
2.04%
F-Secure
Variant.Strictor.103245
2.04%
The domain download-is.chip.eu has been seen to resolve to the following IP address.
ec2-50-112-97-171.us-west-2.compute.amazonaws.com
December 18, 2013
File downloads found at URLs served by download-is.chip.eu.
Latest 30 of 115 download URLs
URL:
http://download-is.chip.eu/
Network:
Amazon Web Services (AWS), running an EC2 instance
Web server:
Microsoft-IIS/8.5 (PHP/5.3.13)
